🌍 Remote | UTC+8 | Core collaboration hours: 12:00–6:00 PM Manila Time
Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines.
We combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region.
7M+ app downloads. 2M+ monthly active users. 7,000+ partner stores. US$310M+ raised from leading global investors.
Manila-based, globally distributed, and hybrid-first — our team spans 45+ countries.
If you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us.
Southeast Asia's fintech moment starts here.
You'll help run and improve practical security controls across Salmon, a regulated group spanning banking, consumer finance, and a shared technology platform, and drive recurring risks to resolution.
Work across Microsoft Defender, Intune, Entra ID, Microsoft 365 and Sentinel to find security issues, judge how much they matter, and get them fixed.
Work daily with the Manager, Security Operations and with IT and engineering teams, moving issues from identification to remediation.
Take cases from the Security Service Desk, find the underlying cause, and fix recurring problems instead of closing tickets one by one.
Own the operational side of vulnerability management: review findings, prioritise by risk, track remediation, and escalate material or overdue issues.
Own security update, patch compliance, and device configuration follow-up for corporate laptops.
Own day-to-day DLP and access controls: alert review, investigations, suspicious sign-ins, privileged access monitoring, SSO coverage, and periodic access reviews.
Run the security awareness platform and LMS: training campaigns, completion tracking, reporting, and phishing simulations.
Investigate and resolve security Service Desk cases covering endpoints, access, policy exceptions, and suspicious activity.
Improve recurring Security Operations work through better processes, KQL queries, playbooks, documentation, and lightweight automation, including Sentinel detections where useful.
Hands-on experience with Microsoft Defender XDR / Defender for Endpoint, Intune, Entra ID, and Microsoft 365 security and audit telemetry
Working knowledge of Microsoft Sentinel and KQL for investigation and correlation
Experience running vulnerability management and patch compliance, including follow-up with system owners
Experience with DLP and access controls
Ability to understand the risk behind operational issues, set sensible priorities, and work independently
Track record of following problems through to resolution and documenting findings so others can act on them
Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8)
Company-provided tools and equipment
Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits
Access to an internal mental health support specialist
22 vacation days, Philippine public holidays, and 15 sick days
Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications
Company-sponsored trips to Manila to meet and work with your team in person
High-performing teams can earn a dedicated beach house week in Southeast Asia
We believe strong teams are built by people with different backgrounds, experiences, and points of view. Salmon is an equal opportunity employer, and we make hiring decisions based on skills, experience, and potential.
Provides Tier III SOC support in federal environments, leading complex security investigations and incident response while improving threat detection, operational processes, and analyst capabilities.
Own and engineer corporate security operations across detection, incident response, identity, endpoints, SaaS, DLP, AI, and vulnerability management, connecting tools through automation to strengthen defenses.
Lead global security operations, command major incident responses, and set detection strategy while developing a distributed team and modernizing triage and response with AI and automation.
As a Staff Security Operations Specialist, you will be responsible for threat detection, investigation, and response, building an AI layer to enhance security operations at Workleap and ShareGate.
Own application and cloud security across engineering, embedding secure design, threat modeling, vulnerability remediation, and automated controls into services, infrastructure, and developer workflows.
